CompTIA A+

1. Test Exam - 40 out of 50 questions - 80% - 1002

16 out of 19 - Windows Operating Systems - 84%

3 out of 4 - Other OS - 75%

12 out of 15 - Security - 80%

5 out of 5 - Software Troubleshooting - 100%

4 out of 7 - Operational Procedures - 57%   (pg 19 - 43)




2. Test Exam - 72 out of 90 questions - 80% - 1002

26 out of 30 - Windows OS - 86%

5 out of 9 - Other OS - 55%

21 out of 23 - Security - 91%

8 out of 13 - Software Troubleshooting - 61%

12 out of 15 - Operational Procedures - 80% (pg 19 - 43)





1. Chapter 16 - Working with the Command Line

- Dir /ah ; show hidden files and folders

- ping -a ; resolves IP addresses to a hostname
- ping -f ; sets the "Don't fragment" flag on the PING packets
- ping -t ; runs PING until you MANUALLY stop it (default is 4 pings)

- attrib +h ; will give the specified file the "Hidden" attribute
- attrib +h /s ; will make all the files in the given folder and all of its subfolders HIDDEN
- attrib -h ; will REMOVE the "hidden" attribute
- attrib -h /d ; will UNHIDE files AND folders

- fsutil fsinfo ntfsinfo c: - this command will output the NTFS version

- net use ; ran with no parameters will list your PCs connection(s) to shared resources
- net use DRIVE: \\SERVER ; this will map a drive that's being shared from SERVER
[Example: net use f: \\dpct-files\shares]

- net view ; output a list of PCs on the same network; usually get the "System Error 6118"
- net view SERVER ; shows the drive letter of where the shared drive is mapped
[Example: net view \\dpct-files]

- net share ; outputs info about all of the resources that are shared on the LOCAL PC

- the "MSTSC" (Microsoft Terminal Service Client) command will open up Remote Desktop Connections; allows you to edit Remote Desktop config files





2. Chapter 02 - Operational Procedures

- The "Troubleshooting Theory" is in order of:

1. Identify problem >
2. Establish theory on what caused it >
3. Test theory > [if] theory is confirmed [then] >
4. Take action >
5. Verify system functionality AFTER working on it>
6. Document findings, actions, outcomes


* NOTE: you do not have the obligation to fix EVERY person's PC; you can suggest ways to get it repaired/solved
* NOTE: "Knowledge Base" CLEAR DOCUMENTATION; a searchable archive; usually part of Help Desk software


- Radio Frequency Interference (RFI) is when a microwave interferes with a wireless network
- ESD (Electrostatic Discharge); walking on carpet and then touching a stick of RAM
- ESD (Electrostatic Discharge) is promoted in COOL and DRY AIR conditions
- ESD is when 2 objects have DISSIMILAR electrical potential

* NOTE: ESD will NOT destroy humans, but can shock; only sensitive components (hardware) are destroyed

* NOTE: "ABC Fire Exstinguisher"; A - Wood fires; B - Grease fires; C - Electrical fires



3. Chapter 12 - Building a PC - System Features (Domain/WorkGroup/HomeGroup/EFS/Media Center/Bitlocker) and Requirements

* NOTE: Windows 7 Experience Index; is based on the LOWEST of your subscores


    


    *** System Features & System Requirements ***


1. Domain - Requires a specific server to control access to the network's resources; Requires running a different version of Windows; better suited for large networks

* NOTE: Pro versions and GREATER

* Win 7 Pro/Enterprise/Ultimate
* Win 8 Pro/Enterprise
* Win 10 Pro/Enterprise/Education

- Users log directly into a domain INSTEAD of locally (or WORKGROUP)
- Active Directory Domain Services; centralized management
- all users accounts, servers, printers, etc are stored on a DC (Domain Controller)
- a feature of having a domain is Single-Sign-On (SSO), which allows a user to log into any PC on the network using his/her credentials
- not suitable for home use; many servers are use (distributed architecture)
- Domain Feature: Win 7 Pro/Enterprise/Ultimate | Win 8/8.1 Pro/Enterprise | Win 10 Pro/Enterprise/Education
- Business; Crentralized network; 100s - thousands of users and PCs



2. WorkGroup - The SIMPLEST of the 3 network sharing technologies; the DEFAULT for EVERY versions of Windows; nothing special about this; best suited for small networks (few users and security concerns); provides almost NO SECURITY and requires a lot of signing in to get to resources

* EVERY version of Windows

- Logical groups of network devices; every device is a standalone system; everyone is EQUAL




3. HomeGroup - Is already inside of versions of Windows; Completely shares "Libraries" instead of files and folders; Connects a group of PCs using 1 COMMON PASSWORD (no user names needed); Libraries: Pictures, Music, Videos, Documents, and Printers

* EVERY version of Windows; although not supported on Windows 10

- Works on a single PRIVATE network ONLY;



4. Bitlocker - Encrypts the entire drive (FDE [Full Disk Encryption] or selected portion of a drive (portion of the drive that's being used)

* NOTE: Win 8 and up is Pro versions and GREATER
* NOTE: REQUIRES 2 volumes to set up; 1st is 100 MB and the PC boots from it; 2nd holds all of the OS data

* Win 7 Enterprise/Ultimate
* Win 8/8.1 Pro/Enterprise
* Win 10 Pro/Enterprise/Education


- requires a TPM (Trusted Platform Module) on motherboard to function (but a setting in "Local Group Policy Editor" under "Computer Configuration" > Administrative Templates > Windows Components > Bitlocker Driver Encryption > Operating System Drives > edit "Require additional authentication at startup"

- MUST use your "Recovery Key"/"Recovery Password" when swapping drives from old PC to new PC

* NOTE: "Bitlocker to Go" is used to encrypt REMOVABLE drives; and this DOES NOT require a TPM (Trust Platform Module)



- Windows Media Center (WMC)- Plays audio CDs and DVDs; Media Center can play slideshows, videos and music from local hard drives, optical drives and network locations. Users can stream television programs and films through selected services such as Netflix; think of UT SOD dental room and coaxial stations

* Win 7 Home Premium/Pro/Enterprise/Ultimate
* Win 8/8.1 Core/Pro/Enterprise

* NOTE: Windows 10 DOES NOT support DVD Playback or Media Center



5. EFS (Encrypting File System): Can encrypt individual files or folders on a PC

* Pro versions and GREATER; on ALL versions of Win 10

* Win 7 Pro/Enterprise/Ultimate
* Win 8 Pro/Enterprise
* Win 10 ALL VERSIONS

* NOTE: Right-click on a file/folder > Properties > "Advanced ..." button > check "Encrypt contents to secure data"



6. BranchCache: is a WAN (Wide Area Network) bandwidth OPTIMIZATION technology; it fetches content from the main office (or hosted cloud) and caches the content at other branch offices, which allows client PCs to access the content locally rather than over WAN (Wide Area Network)

- installed on servers; no addtional hardware or external services needed
- conserves bandwidth over slower links
- supports HTTP, HTTPS, and SMB (Sever Message Block); Network Protocol: SSL and IPsec
- SharePoint 12, Windows Media Player, IE, Flash, Silverlight, Windows Explorer, RoboCopy, Copy File.

* NOTE: Allows files to be READ even when a connection is LOST from a file server, but DOES NOT support writing to files unless there is internet connection

* Win 8/8.1 & Win 10 Enterprise/Education ONLY

- installed on servers; no addtional hardware or external services needed
- conserves bandwidth over slower links
- supports HTTP, HTTPS, and SMB (Sever Message Block); Network Protocol: SSL and IPsec
- SharePoint 12, Windows Media Player, IE, Flash, Silverlight, Windows Explorer, RoboCopy, Copy File.


7. App Locker - Controls how users can access and use files, such as executable files, packaged apps, scripts, Windows Installer files, and DLLs

* Win 8 Enterprise/Education
* Win 10 Enterprise/Education

- Create exceptions to rules. For example, you can create a rule that allows all Windows processes to run, except Registry Editor (regedit.exe)
- Assign a rule to a security group or an individual user
- Define rules based on file attributes derived from the digital signature, including the publisher, product name, file name, and file version. For example, you can create rules based on the publisher attribute that is persistent through updates, or you can create rules for a specific version of a file



8. Hyper-V - A native "hypervisor"; implements isolation of virtual machines in terms of a partition

* Win 10 Pro/Enterprise/Education

* NOTE: is built into Windows as an optional feature -- there is no Hyper-V download








    *** System Requirements for 32-bit Install ***


* NOTE: Starting with the May 2019 OS release update, the MINIMUM STORAGE SPACE requirement for both 32-bit and 64-bit Windows 10 was increased to 32 GB


- Windows 7

CPU: 1 GHz
RAM: 1 GB/4 GB
HDD: 16 GB
Video: DirectX 9 graphics device with WDDM (Windows Display Driver Model) 1.0 or higher driver



- Windows 8/8.1

CPU: 1 GHz w/support for PAE (Physical Addressing Extension), NX (No eXecute), and SSE2 (Streaming [Single Instruction Multiple Data] Extensions 2)
RAM: 1 GB/4 GB
HDD: 16 GB
Video: Microsoft DirectX 9 graphics device w/WDDM (Windows Display Driver Model) driver

* NOTE: Windows "Core" versions are ONLY AVAILABLE ON Windows 8/8.1; think of it as a BASIC Windows 8/8.1 (only feature is Windows Media Player)

* NOTE: PAE - allows a 32-bit CPU to access more than 4GB of RAM; think of the "Paging File" in Windows
* NOTE: NX - enables the CPU to protect certain sections of memory; stops malicious attacks from getting to essential OS files
* NOTE: SSE2 - Intel's CPU instructions set used by 3rd party apps and drivers



- Windows 10

CPU: 1 GHz w/support for PAE (Physical Addressing Extension), NX (No eXecute), and SSE2 (Streaming [Single Instruction Multiple Data] Extensions 2)
RAM: 1 GB/4 GB
HDD: 16 GB
Video: Microsoft DirectX 9 graphics device w/WDDM (Windows Display Driver Model) driver





    *** System Requirements for 64-bit Install ***


* NOTE: Starting with the May 2019 OS release update, the MINIMUM STORAGE SPACE requirement for both 32-bit and 64-bit Windows 10 was increased to 32 GB


- Windows 7

CPU: 1 GHz
RAM: 2 GB/192 GB
HDD: 20 GB
Video: DirectX 9 graphics device with WDDM (Windows Display Driver Model) 1.0 or higher driver



- Windows 8/8.1

CPU: 1 GHz w/support for PAE (Physical Addressing Extension), NX (No eXecute), and SSE2 (Streaming [Single Instruction Multiple Data] Extensions 2)
RAM: 2 GB/512 GB
HDD: 20 GB
Video: Microsoft DirectX 9 graphics device w/WDDM (Windows Display Driver Model) driver


* NOTE: Windows "Core" versions are ONLY AVAILABLE ON Windows 8/8.1; think of it as a BASIC Windows 8/8.1 (only feature is Windows Media Player)

* NOTE: PAE - allows a 32-bit CPU to access more than 4GB of RAM; think of the "Paging File" in Windows
* NOTE: NX - enables the CPU to protect certain sections of memory; stops malicious attacks from getting to essential OS files
* NOTE: SSE2 - Intel's CPU instructions set used by 3rd party apps and drivers



- Windows 10

CPU: 1 GHz w/support for PAE (Physical Addressing Extension), NX (No eXecute), and SSE2 (Streaming [Single Instruction Multiple Data] Extensions 2)
RAM: 2 GB/2048 GB
HDD: 20 GB
Video: Microsoft DirectX 9 graphics device w/WDDM (Windows Display Driver Model) driver





4. Chapter 28 - Securing Computers

- Phishing is a TECHNIQUE and NOT an "infection" or malware

- "Security Screws"

* NOTE: Windows Defender only protects against Spyware and Adware

* NOTE: "Turnstiles" are those Subway station rotating bars; precents "Tailgating" (1-person at a time)





5. Chapter 12 - Building a PC

- a "degaussing tool" is the most secure way to ensure data cannot be recovered



- Windows 7 Experience Index; is based on the LOWEST of your subscores



6. Chapter 25 - Understanding Mobile Devices

- iOS 5; a new feature was the ability to perform untethered updates


- "Gyroscope"; keeps track of a phone's ORIENTATION (playing driving games on phone; tilts screen)



7. Chapter 22 - Wireless Networking

- FIRST STEPS to securing a network; 1. Change the SSID 2. Change the default user name



1st - WPS (Wi-Fi Protected Setup) [Weak Piece of Shit] - uses a 7-digit PIN; uses NFC (Near Field Communication) press a button


2nd - WEP (Wired Equivalent Privacy) - all traffic is encrypted with the SAME KEY; IV-Attack (Initialization Vector) is 24-bit encryption; uses RC4 encryptiong (WEAK!)

* NOTE: To strengthen WEP, TKIP (Temporal Key Integrity Protocol) was employed; placed a 128-bit wrapper around the already encrypted WEP with a key


3rd. WPA (Wireless Protected Access) - uses the RC4 (WEAK) encryption algorithm with TKIP (Temporal Key Integrity Protocol); 


4th. WPA2 (Wireless Protected Access 2) - MOST SECURE; requires CCMP (Counter Mode w/ Cipher Block Chaining Message) authentication, which uses 128-bit AES encryption with a 48-bit initialization vector; minimizes chances of "Replay Attacks"

* NOTE: CCMP > TKIP > PSK


8. Chapter 13 - Windows Under the Hood

* NOTE: Learn the Registry Hives Keys



9. Chapter 28 - Securing Computers

- Windows Vista does NOT come with a built-in anti-virus application



10. Chapter 23 - The Internet

- in order to get rid of a certificate you must CLEAR the SSL cache


- "Certificates" provides AUTHENTICATION to a server and provides ENCRYPTION
- "Certificates" include keys (Private Key) used for ENCRYPTION and the PKI (Public Key Infrastructure) provides a way to create, manage, and distribute certificates


- proxy settings; after malware removal a user can no longer browse the internet

* NOTE: Pop-ups are a sign of "Spyware"; use Anti-Spyware software



11. Chapter 19 - Display Technologies

- a 2nd monitor isn't showing but the drivers and video adapter has been installed properly



12. Chapter 03 The Visible Computer

- Windows 7 "Action Center"; found in the Control Panel and in the Notification Area, enables you to review recent messages, problems, and potential solutions

- just double-click the ZIP file to open in; since Windows XP there has been a native (built-in) support for files w/ZIP extensions


- Windows Sidebar; a gagdet that allows your to display info on the desktop (CPU meter, calendar, weather, etc)



13. Chapter 25 - Understanding Mobile Devices

- Geotracking; provides location information on mobile apps that use mapping functions

* NOTE: The question was what DEFINES and not what CAN geotracking do



14. Chapter 17 - Troubleshooting Operating Systems

- "Last Known Good Configuration"; good for DRIVER and REGISTRY problems; holds all the CRITICAL info from the LAST SUCCESSFUL BOOT

* NOTE: "Recovery Console" works as a command line utility and is best at fixing the 1. MBR 2. Reinstalling the boot files 3. Rebuilding the "Boot.ini" file

- Important Tools inside "Recovery Console"

* attrib
* bootcfg
* chkdsk
* diskpart
* format

- Important tasks "Recovery Console" can perform:

* create and remove directories, and copy, erase, display, and rename files
* enable and disable services (which modifies the service control database in the registry, to take effect when the system is next bootstrapped)
* repair boot file, using the bootcfg command
* write a new master boot record to a disk, using the fixmbr command
* write a new volume boot record to a volume, using the fixboot command
* format volumes
* expand files from the compressed format in which they are stored on the installation CD-ROM
* perform a full chkdsk scan to repair corrupted disks and files, especially if the computer cannot be started properly


- "Event Viewer" can be found in: Start > Control Panel > Administrative Tools > Event Viewer


- System Restore; if an app works 1 day and the next day it doesn't; The database in the Register might have been changed



15. Chapter 10 - Implementing Hard Drives

- "Degaussing Tool" and "Incineration" (fire) is the most secure way to ensure data cannot be recovered; 

- - "Low-Level Format" - NOT RECOVERABLE; resets the drive to its "out-of-the-box" state; NOT done by users UNLESS donating/selling a drive to someone

- - "Regular/Standard Format" - SLOW;  NOT RECOVERABLE; opposite of "Quick Format"; overwrites data sectors with 0s;

- "High-Level Format" - similar to "Quick Format"; writes a file system on disk; scanning of the complete hard drive and all of its sectors and writes ZEROS on ALL of the sectors; 

- "Quick Format" - removes its markers/traces to the data, sets up the file system and clears the master file table and install boot sector


* NOTE: Quick Format/High-Level/Standard would be used to reinstall an OS


    *** Hard Drive Statuses ***

- "Foreign" disk means that you have recently installed a DYNAMIC disk into your PC
- Formatting - disk is formatting
- Failed - DAMAGED or CORRUPT disk
- Online - healthy and communicating properly
- Offline - corrupt or having bad communication problems

* NOTE: A HDD that's failing will give input/output errors
* NOTE: - "Foreign" disk; must be imported first before used


- 



16. NTFS permissions vs Sharing permissions

NTFS: BOTH Files and Folders

Sharing: Network Folders ONLY



* NOTE: NTFS Permissions > Share Permissions when accessing folder/file LOCALLY

* NOTE: NTFS permissions are CULMULATIVE; they stack and the user/group receives the HIGHEST RANKED permission

[Example: Full Control over a folder, but only Read permissions for a file within that folder -- you have FULL CONTROLL over that file]


- NTFS permissions are located in: Right-click Folder/File > Properties > "Security" tab

* NOTE: ACL (Access Control List) is viewed/edited here; Top area
* NOTE: ACE (Access Control Entry) is viewed/edited here; Bottom area (Modify, Read, Write, etc)


* NOTE: Always have Domain Admins and [Local] Administrators added

- In the NTFS (Security tab) permissions, REMOVE default groups/users except "SYSTEM"
- Disable the "Inheritance" from the folders ABOVE the path of where your folder is being shared 


    *** Sharing (Network) Permissions ***


- Read: This is much like the NTFS permission above. Users can only view file names, read the data in those files, and run some programs.

- Change: Users have all the permissions included with read, but can also change data within files, add new files or folders, and delete files or folders. This permission is never assigned by default and must be assigned on purpose.

- Full Control: This is the same as the NTFS permission—users can do all of the things included in the read and change groups but can also change the permissions for files and folders. All administrators are granted full control permissions by default.


    *** NTFS (Local) Permissions ***


- Full Control: With this setting turned on, this means users can add, change, move, and delete files and directories. This also applies to any associated properties of the files or directories. Furthermore, users can change the permissions for the files and directories, which means they can give others full control or take permissions away.

- Modify: This is not as powerful as full control, but users can still view and modify files and their properties. They can add or delete files from a directory or add or delete properties from a file.

- Read and Execute: This means users can read files and run executable files including scripts. They cannot modify files and their properties.
- Read: Users can only read or view files, their properties, and directories.
- Write: Users are only able to write to a file or add files to a directory.
 

- Effective Permission: If there are NO DENIALS

[Example: Group 1 - Modify + Read/Execute | Group 2 - Read | = Effective Permission is Modify + Read/Execute + Read]

- Effective Permission: If there ARE denials

[Example: Group 1 - Modify + Read/Execute + Write | Group 2 - DENY Modify + DENY Write | = Effective Permission is Read/Execute]



[Example: Full vs Read = Read is Most Effective | Read/Change vs List Contents = List Contents is Most Effective]

- The Most Effective Permission between MULTIPLE groups in BOTH NTFS and Sharing = 


- The LEAST restrictive of the multiple groups in Sharing, the LEAST restrictive in NTFS, then take the MOST restrictive between those 2

[Example: Group 1 + Group 2 = Read+Change = Change | Group 1 + Group 2 = Read+Full = Full;
so then, Change + Full = Change]

[Example: Full Control for Shared folder, but Read Only in NTFS (Local); the user can only READ a file/folder contents]


* NOTE: When setting up NTFS and Sharing permissions it is good practice to:

- Setup Sharing permissions BEFORE NTFS permissions
- Use the "Advanced Sharing" button instead of "Share"
- Remove all default users/groups and add your own



* NOTE: Sharing permissions are applied to Network users ONLY + Folders ONLY

- Located in Folder > Properties > "Sharing" tab


* NOTE: Right-click on FOLDER > Properties > Sharing tab:

- The "Share" and "Advanced Sharing" section is SHARING (Network) permissions



* NOTE: The "Share" section is for Home users (HomeGroup)

* NOTE: The "Advanced Sharing" is for Sys Admin (Network)


[Hierachy of precendence]

Explicit Deny > Explicit Allow > Inherited Deny > Inherited Allow



17. Chapter 18 - Virtualization

- Using a POWERFUL system as the virtualization server will ensure that the virtual environments all run smoothly; CPU > RAM



18. Chapter 24 - Portable Computing

- Standby Mode; data is NOT copied to the HDD; requires MORE power, but the system returns to normal mode more quickly



19. Chapter 26 - Care and Feeding of Mobile Devices

- Settings that will give a user a limited amount of password guesses before the phone erases data; Failed login attempts & Passcode Locks

- restarting a phone can resolve unexpected problems (can't get e-mails but can browse the internet); WHICH WOULD YOU DO FIRST? reconfiguring the e-mail is a good choice, but restarting wouldn't hurt


20. Policies and Privacy

- GDPR (General Data Protection Regulation) - European Union regulation; data protection and privacy for individuals

* NOTE: name, address, photos, e-mail address, bank details, posts on social networks, medical info, a PCs IP address, etc

* NOTE: user decides where their data goes



- FOSS (Free and Open Source Software) - software that can be classified as both free software and open-source software.

- EULA (End User License Agreement) - closed source (commercial); end user gets compiled executable

- PCI DSS (Payment Card Industry Data Security Standard) - standard for protecting credit cards

- HIPPA (Health Insurance Portability and Accountability Act of 1996) - a federal law that protects sensitive patient health info from being disclosed without the patient’s consent or knowledge

- PHI (Protected Health Information) - health status, health care records, payments for health care, etc



21. Upgrades


* NOTE: Updgrades are FASTER than Installs
* NOTE: Upgrades keeps user data and software installed

* NOTE: CANNOT upgrade directly from Win 8 to Win 10; must jump to Win 8.1 and then to Win 10


    *** Upgrading Windows ***

1. In-place - starts the setup of new OS INSIDE the existing OS; insert CD/DVD > navigate to folder inside D: drive > double-click on "setup"

- Keeps all apps, docs, and settings
- Upgrades the existing OS



2. Clean Install - WIPES EVERYTHING; starts setup from USB or CD/DVD at BOOT UP


    *** Windows 7 To Windows 10 HOME ***

* Starter > Upgrade
* Home Basic > Upgrade
* Home Premium > Upgrade

* Pro > INSTALL
* Ultimate > INSTALL
* Enterprise > INSTALL

    

    *** Windows 7 to Windows 10 PRO ***

* Starter > Upgrade
* Home Basic > Upgrade
* Home Premium > Upgrade
* Pro > Upgrade
* Ultimate > Upgrade

* Enterprise > INSTALL


    *** Windows 7 to Windows 10 ENTERPRISE/EDUCATION ***

* Pro > Upgrade
* Enterprise > Upgrade

* Starter > INSTALL
* Home Basic > INSTALL
* Home Premium > INSTALL
* Ultimate > INSTALL



    *** Windows 8.1 to Windows 10 HOME ***

* Core > Upgrade

* Pro > INSTALL
* Enterprise > INSTALL


    *** Windows 8.1 to Windows 10 PRO ***

* Core > Upgrade
* Pro > Upgrade

* Enterprise > INSTALL


    *** Windows 8.1 to Windows 10 Enterprise ***

* Pro > Upgrade
* Enterprise > Upgrade

* Core > INSTALL


    *** Upgrading Windows </end> ***





22. Windows "Credential Manager"


23. When removing malware: 

1. Identify malware
2. Disconnect from network (quarantine PC) >
3. disable system restore > ...
4. remediate; update anti-malware signatures and scan/remove malware
5. schedule scans and run updates
6. re-enable System Restore and create Restore Points
7. Educate user

- pg. 1268


25. "DRM Server" (Digital Rights Management); used to manage the use (limit usage) of apps


26. fragmentation; 


27. APM/ACPI (Advanced Power Management)/(Advanced Configuration and Power Interface) Modes:

1. [Full] On - 
2. Enabled - CPU and RAM are running at FULL POWER; Unused device(s) may or may not have power
3. Standby [Sleep] [RAM] - CPU is STOPPED; RAM stores ALL programs; all peripherals are shut down; FASTER response than HDD
4. Suspend [Hibernation] [HDD] - EVERYTHING is shut down or at its LOWEST CONSUMPTION setting; SLOWER response than RAM

* NOTE: There is no "SHUT DOWN"

Hibernate (Suspend) vs Sleep (Standby)

1. Hibernate - SLOW [HDD]; USES ZERO POWER; PC turns off COMPLETELY; 

* NOTE: Takes longer to power back up due to the "hiberfil.sys" file being read from the HDD and not the RAM; 


2. Sleep - SPEED [RAM]; USES POWER; PC is technically still on; 


* NOTE: The CPU must have SMM (System Manage Mode)



28. Wireless standards (in ascending order):


- 802.11b - 2.4GHz - 300ft - 11 Mbps - 22 MHz bandwidth


- 802.11a - 5-GHz - 150ft - 54Mbps - 24 MHz bandwidth


- 802.11g - 2.4GHz - 300ft - 54Mbps (BEST OF BOTH WORLDS) - 20 MHz bandwidth


- 802.11n - 2.4GZ AND 5-GHz - 300+ ft - 600 Mbps - MIMO (Multiple Input/Multiple Output) - 20/40 MHz bandwidth (40 MHz is bonded channels)


- 802.11ac - 5GHz - 300+ ft - 7 Gbps (FASTEST) (MU-MIMO) [Multi-User Multiple Input/Multiple Output] - 80/160 MHz bandwidth

* NOTE: Devices that run 802.11n will have 40 MHz of bandwidth



28. "Sync Center"; makes files available to you even when you're not connected to the server that provides those files

[Example: editing a file while on vacation, when you return to work and login in to the network, the edits while on vacation will sync to the files on the server]

- located in the "Control Panel"

- files automatically sync and update when you get back online

- is NOT available in Windows Home edition; only AVAILABLE in Windows Pro/Enterprise/Education

- marks files as "available offline"

- 


29. Network Topologies - the layout of how a network communicates with different devices; the 2 types of topologies are 1. Wired 2. Wireless


    *** Wired Topology ***

1. Star: the most COMMON; all devices are connected to 1 CENTRAL point (a Hub or a Switch)

* NOTE: If 1 device fails, the remaining devices still have a connection to the Hub/Switch

* NOTE: If the 1 CENTRAL point (Hub/Switch) fails then all connections go down; SINGLE POINT OF FAILURE


2. Ring: Each device is connected TO EACH OTHER (not every other device; 4 connections is 4 connections); each data packet is sent around the "Ring" until it reaches its targeted device

* NOTE: Very old and rarely used; easy to install and troubleshoot

* NOT REDUNDANT; If there's a break in the cable or 1 device goes down then ALL data will be disconnected


3. Bus: each device is connected to a SINGLE CABLE (a backbone; a coaxial cable; this is connected with "BNC" (Bayonet Neill–Concelman) [T-connectors]

* NOTE: cheap and easy to install

* NOTE: requires BOTH ends of the SINGLE CABLE to be TERMINATED; if not, data will bounce back (Signal Reflection) and data will be disrupted


4. Mesh: every device is connected to every other device on the network (4 connection is actually 12 connections)

* NOTE: highly redundant

* NOTE: expensive; rarely used in LANs; more commonly used in WANs (the Internet)


30. Socket Number (port number)

[Example: 66.83.10.24:443] the "443" would be the Socket Number

- uniquely identifies one end of a communication session running on a network

- shows the IP Address and the port number of one end of a session


31. Throughput Data Transfer:



1. USB 1 - 12 Mb/s or 1.5 MB/s

2. USB 2 - 480 Mb/s or 60 MB/s

3. USB 3 - 5 Gb/s or 625 MB/s

4. USB 3.1 - 10 Gb/s or 1.25 Gb/s

5. IEEE 1394b (Firewire) [I-Link] - 800 Mb/s or 100 MB/s

6. SATA 1.0 - 1.5 Gb/s

7. SATA 2.0 - 3 Gb/s 

8. SATA 3.0 - 6 Gb/s or 750 MB/s

9. Thunderbolt v1 - 10 Gb/s or 1.25 Gb/s

10. Thunderbolt v2 - 20 Gb/s or 2.5 Gb/s

11. Thunderbolt v3 - 40 Gb/s or 5 Gb/s

* NOTE: 802.11b - 11 Mbps
* NOTE: 802.11a - 54Mbps
* NOTE: 802.11g - 54Mbps (BEST OF BOTH WORLDS) [b + a]
* NOTE: 802.11n - 600 Mbps - MIMO (Multiple Input/Multiple Output)
* NOTE: 802.11ac - 7 Gbps (MU-MIMO) [Multi-User Multiple Input/Multiple Output]



32. PAE (Physical Addressing Extension) - allows a 32-bit CPU to access more than 4GB of RAM; think of the "Paging File" in Windows

- only supported in XP, Vista, 7, Server 2003, Server 2008

- is automatically enabaled if DEP (Data Execution Prevention) is already enabled

- to explicitly enable PAE in command:

[bcdedit /set \[{ID}\] pae ForceEnable]

- to disable BOTH DEP (Data Execution Prevention) and PAE (Physical Addressing Extension) in command:

1. bcdedit /set \[{ID}\] nx AlwaysOff 
2. bcdedit /set \[{ID}\] pae ForceDisable]


33. SSE2 (Streaming [Single Instruction Multiple Data] Extensions 2) - Intel's CPU instructions set used by 3rd party apps and drivers



34. VDI (Virtual Desktop Infrastructure) - hosting a desktop environment on a central server; virtualization; 

- a PERSISTENT VDI (Virtual Desktop Infrastructure) - PERSONAL/CUSTOMIZED; a user connects to the SAME desktop EACH TIME, and users are able to PERSONALIZE the desktop for their needs and changes are SAVED even after the connection is reset;

- a NON-PERSISTENT VDI (Virtual Desktop Infrastructure) - DEFAULT/RESET; a user connects to a GENERIC desktop and NO CHANGES are saved; a SIMPLE and CHEAPER desktop; used in organizations with a lot of task workers who perform a limited set of repetitive tasks



35. "Zigbee" and "Z-Wave" - IoT (Internet of Things) technologies that permit communication between home appliances and network



36. msconfig; msconfig.exe

- Windows list choices of STARTUP CONFIGURATIONS is located in the "GENERAL" tab

* NOTE: "Normal", "Diagnostic Startup", "Selective Startup" options


- Windows list choices of DIAGNOSTIC STARTUP options are located in the "GENERAL" tab

* NOTE: Options contain, "Load all devices drivers and services", "Load basic devices and services only", and "Selective" options


- The "Boot" tab contains "Safe Boot" options and other options like:

* NOTE: No GUI boot
* NOTE: Boot log
* NOTE: Base video
* NOTE: OS boot info
* NOTE: Time (how long to show GUI boot menu) [if dual booting]


37. File Systems

DFS (Distributed File System) - a set of clients and server SERVICES that allow an organization using Windows Server to organize many distributed SMB (Server Message Block) file shares

NFS (Network File System) - a distributed file system PROTOCOL that allows users on a client PC to access files over a network; think of local storage (HOMEGROUP)

FAT32 - a total size limit of 2TB and file size limit of 4GB

exFAT - Microsoft's proprietary file system; a total size limit of 64 ZB (Zettabytes) and file size limit of 16 EB (Exabytes)


38. Authentication , Multi-Factor Authentication; Hardware and Software Tokens

- CAC (Common Access Card) - specialized type of Smart Card used by US D.o.D; includes pic of user; used for access of rooms and PCs

* NOTE: Provides Confidentiality, Integrity, Authentication, and Non-Repudiation
* NOTE: Card is embedded with certificates used for digital signatures and encryption


- PIV (Personal Identity Verification) Card - SAME AS a CAC (Common Access Card) but is used by US Federal agents


- Proximity Card - small cards that activate when then are close to a card reader

* ID Badges
* Smart Cards


- RFID (Radio Frequency Identification) Badge - 

* ID Badges
* Smart Cards

* NOTE: RFID is used to TRACK and MANAGE inventory
* NOTE: RFID collects collects and uses power to transmit data stored on the device
* NOTE: These are DIGITAL security prevention methods




    *** Tokens ***


Software Token (Software/Apps) and Hardware Token (Smart Card, USB Drives, Key Fobs)

* NOTE: One significant benefit between of HOTP (Hardware/Physical) and TOTP (Software/File) is price; TOTP is CHEAPER; you can download 10 free apps on BYOD vs buying 10 Hardware Tokens

HOTP (HMAC-based One-Time Password) - an open standard used for creating an OTP (One-Time-Password) [i.e Key Fob]

- The algorithm combines a secret key and an incrementing counter, and uses HMAC (Hash-based Message Authentication Code) to create a hash of the result
- It then converts the result into an HOTP value of six to eight digits

TOTP (Time-based One-Time Password) - uses a timestamp instead of a counter (what HOTP uses)

- One-time passwords created with TOTP typically expire after 30 seconds
- Software token is a small file used by authentication services indicating a user has logged on


    *** Token </end> ***


39. Power Supply and UPS (Uninterruptible Power Supply)

- The 3 types of UPS (Uninterruptible Power Supply):

1. Online/Double-Conversion UPS - BEST; devices are constantly receiving battery power

2. Line-Interactive UPS - handles moderate AC (Alternate Current) sags and surges without the need to switch to batter power

3. Offline/Standby UPS - BASIC; devices only receive battery power when the AC (Alternate Current) sags below ~80-90 Volts

Sag - a DECREASE in electrical current of 10 to 90 percent; very short lived
Surge - less of an increase than a SPIKE but LAST LONGER; 15-milliseconds to several minutes
Spike - LARGE SUDDEN INCREASE in electrical current; really SHORT LIVED
Brown Out - under voltage conditions required; 
Black Out - COMPLETE LOSS OF POWER


40. "Archive Bit" - a file attribute that indicates whether or not the file has been backed up


41. Backup Types

- Full Backup:

* Starting point for ALL backup types > archive bit CLEARED; set to "0" > Recovery; a full backup is needed


- Differential Backup:

* Only backs up changed data from last FULL BACKUP > archive bit set to "1" > Recovery; 2 disks needed; FULL Backup and the LAST Differential Backup
[Example: Full Backup on Monday: Tuesday will only backup Tesday, Wednesday will backup TUEDAYS AND WEDNESDAY, and so on...]


- Incremental Backup:

* Only backs up changed data from last FULL or last INCREMENTAL backup > Archive bit set "0" > Recvoery; NEEDS ALL PREVIOUS BACKUPS

* NOTE: Is the FASTEST to backup; backs up the SMALLEST data; but takes the LONGEST to restore
[Example: Full Backup on Monday: Tuesday will only backup Tuesday, Wednesday will only backup Wednesday, and so on...]


42. Shell, CLI, Terminal

Shell - command line interpreter; the PROGRAM used to give commands

CLI - just the interface; opposite of GUI (Graphical User Interface) [menus and buttons to click]

Terminal - text input/output environment


43. MacOS

Disk Utility - Create and restore disk images
Shell - A type of user interface that enables the execution of operating system commands; NOT "Terminal" or "CLI"
Mission Control - feature providing single-screen thumbnail preview of all open windows and applications; NOT "Spotlight"
Spotlight - search utility; NOT "Finder"
Remote Disc - enables access to optical drive of another computer over a network
Finder - file manager; 


44. BYOD, COPE, CYOD

Bring Your Own Device

Company Owned Personal Enabled

Choose Your Own Device


45. MMC (Microsoft Management Console) - a big tool box; NOT AN APPLET; customizable framework providing access to a collection of system tools from the Control Panel applets

* NOTE: Computer Management (compmgmt.msc) is similar; is a tool box; can also be opened by:

Right-click "My Computer/This PC" > Manage > Services and Applications > Services


46. USMT (User State Migration Tool) - primary use in BUSINESS setting; ran in Windows Server;  


47. Windows Easy Transfer - similar to USMT (User State Migration Tool), but for INDIVIDUAL or a FEW users; 


48. Password Restore Disk

- allows a user to recover ENCRYPTED files even if the user forgot his/her password


49. PRAM (Parameter RAM)

- MAC PCs; a type of memory found in Mac PCs; stores SYTEM SETTINGS (i.e Wi-Fi settings)
- Can cause various technical issues; try resetting/reseating to troubleshoot


50. .DLL

- Allows apps to share code to perform functions; are often manipulated by malware; 

- ALWAYS VERIFY the program for which a .dll file is used

[Example: If a user receives a pop-up saying "a .dll file can't be found]; REASERCH the file to VERIFY/IDENTIFY the app that's requesting the .dll


51. CRT Monitors

- Be aware of the VACUUM TUBES inside;  they SHATTER when they implode

- Must be RECYCLED properly


52. Password/Passcodes vs Biometrics

- A password or PIN code is the hardest method of locking down your mobile device for hackers to spoof. Biometric data is MUCH easier to trick and can’t be changed as you’re not going to get new fingerprint or iris patterns


53. DNS (Domain Name System)

- It is the PHONE BOOK that translates IP Addresses; a record of all STATIC IP Addresses
    




        *** Performance Based Questions (PBQ) ***


1. Resolve two support tickets by picking from options available. Issues included screenshots of user issues so you could diagnose. Fairly simple issues (IP/DHCP)

2. Windows won't boot, fix it with command prompt

- bootrec /fixmbr

* NOTE: The MBR knows about all of the disk partitions, the location of the active bootable partition
* NOTE: Common MBR problems: Error loading the OS, Missing OS, Invalid partition table

- bootrec /fixboot

* NOTE: Common Boot Manager problems: Boot Manager is Missing, NTLoader is Missing

- bootrec /rebuildbcd

* NOTE: Rebuilds the menu system (pre login screen)


3. Partition a disk

4. Virtual chat with user to fix their problem by selection correct response options. So know how to converse with users in professional manner and what to do after issue is resolved.

* NOTE: If you're ever in a command prompt PBQ, you can type help to get the available commands in the simulation. It helps to narrow down your memory search

5. Do basic Windows configurations

6. Do basic Linux tasks

7. Configure e-mail settings on an iPhone

* NOTE: The e-mail ports and protocols are:

- POP3 - TCP 110

- IMAP4 - TCP 123

- SMTP - TCP 25


- Secure POP3 - TCP 995

- Secure IMAP4 - TCP 993

- Secure SMTP - TCP 465 or 587
